Add dates of first CVE detection

[David-Development]

https://github.com/CycloneDX/specification/blob/master/schema/bom-1.6.schema.json#L2870C14-L2870C25

extend analysis object:

 "firstIssued": {
    "type": "string",
    "format": "date-time",
    "title": "First Issued",
    "description": "The date and time (timestamp) when the analysis was first issued."
  },
  "lastUpdated": {
    "type": "string",
    "format": "date-time",
    "title": "Last Updated",
    "description": "The date and time (timestamp) when the analysis was last updated."
  }

Check standard if we can just add these attributes anywhere